Need help- Why there is network connection
Hi, Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made. 1. Connection to 13.107.4.52 on tcp/80 (www.msftconnecttest.com) * Why the network connection is being made and what is the reason behind it? * Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? * Is there any settings in the application to disable the network connections? * If users can use the software to export/import data. Is there any cloud service associated with this? It would be of great help if you can kindly give a clarity for the above network connection ASAP. Regards, Siddhartha
Hi Eric, Good day!! Thanks much for the email. We use “Carbon Black” tool to find the network connections of particular application. We got this connection from “werfault.exe” which is a child process of chimera.exe. Please find the attached screenshot for your reference. Hope this helps. Let us know in case any queries. Regards, Siddhartha From: Eric Pettersen <pett@cgl.ucsf.edu> Sent: Tuesday, April 13, 2021 9:08 PM To: Siddhartha Pradhan (Contractor) <siddhartha.pradhan1@gilead.com> Cc: Chimera <chimera-users@cgl.ucsf.edu> Subject: [EXTERNAL] Re: [Chimera-users] Need help- Why there is network connection AFAIK, Chimera does not connect to that URL. You would have to provide details about what you were doing in Chimera when this connection occurred for me to help any further. --Eric On Apr 13, 2021, at 6:54 AM, Siddhartha Pradhan (Contractor) <siddhartha.pradhan1@gilead.com<mailto:siddhartha.pradhan1@gilead.com>> wrote: Hi, Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made. 1. Connection to 13.107.4.52<https://urldefense.com/v3/__http:/13.107.4.52__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwf1WF0NY$> on tcp/80 (www.msftconnecttest.com<https://urldefense.com/v3/__http:/www.msftconnecttest.com/__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwhsZZNHo$>) • Why the network connection is being made and what is the reason behind it? • Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? • Is there any settings in the application to disable the network connections? • If users can use the software to export/import data. Is there any cloud service associated with this? It would be of great help if you can kindly give a clarity for the above network connection ASAP. Regards, Siddhartha _______________________________________________ Chimera-users mailing list: Chimera-users@cgl.ucsf.edu<mailto:Chimera-users@cgl.ucsf.edu> Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users<https://urldefense.com/v3/__https:/plato.cgl.ucsf.edu/mailman/listinfo/chimera-users__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwAARZCow$>
Hi Siddhartha, Any cursory amount of googling would have revealed that werfault.exe is Windows Error Reporting and has nothing to do with Chimera per se: About WER - Win32 apps | Microsoft Docs <https://docs.microsoft.com/en-us/windows/win32/wer/about-wer> --Eric
participants (2)
-
Eric Pettersen -
Siddhartha Pradhan (Contractor)